Revert OPENSSL_EXPERIMENTAL patch.
Change it so JPAKE uses the standard OPENSSL_NO_JPAKE instead.
This commit is contained in:
6
CHANGES
6
CHANGES
@@ -9,12 +9,6 @@
|
|||||||
obligation to set up the dynamic locking callbacks.)
|
obligation to set up the dynamic locking callbacks.)
|
||||||
[Sander Temme <sander@temme.net>]
|
[Sander Temme <sander@temme.net>]
|
||||||
|
|
||||||
*) Update Configure code and WIN32 build scripts to support experimental
|
|
||||||
code. This is surrounded by OPENSSL_EXPERIMENTAL_FOO and not compiled
|
|
||||||
in by default. Using the configuration option "enable-experimental-foo"
|
|
||||||
enables it. Use this option for JPAKE.
|
|
||||||
[Steve Henson]
|
|
||||||
|
|
||||||
*) Use correct exit code if there is an error in dgst command.
|
*) Use correct exit code if there is an error in dgst command.
|
||||||
[Steve Henson; problem pointed out by Roland Dirlewanger]
|
[Steve Henson; problem pointed out by Roland Dirlewanger]
|
||||||
|
|
||||||
|
|||||||
13
Configure
13
Configure
@@ -588,7 +588,6 @@ my $no_threads=0;
|
|||||||
my $threads=0;
|
my $threads=0;
|
||||||
my $no_shared=0; # but "no-shared" is default
|
my $no_shared=0; # but "no-shared" is default
|
||||||
my $zlib=1; # but "no-zlib" is default
|
my $zlib=1; # but "no-zlib" is default
|
||||||
my $jpake=1; # but "no-jpake" is default
|
|
||||||
my $no_krb5=0; # but "no-krb5" is implied unless "--with-krb5-..." is used
|
my $no_krb5=0; # but "no-krb5" is implied unless "--with-krb5-..." is used
|
||||||
my $no_rfc3779=1; # but "no-rfc3779" is default
|
my $no_rfc3779=1; # but "no-rfc3779" is default
|
||||||
my $montasm=1; # but "no-montasm" is default
|
my $montasm=1; # but "no-montasm" is default
|
||||||
@@ -629,7 +628,7 @@ my %disabled = ( # "what" => "comment"
|
|||||||
"camellia" => "default",
|
"camellia" => "default",
|
||||||
"capieng" => "default",
|
"capieng" => "default",
|
||||||
"cms" => "default",
|
"cms" => "default",
|
||||||
"experimental-jpake" => "default",
|
"jpake" => "default",
|
||||||
"gmp" => "default",
|
"gmp" => "default",
|
||||||
"mdc2" => "default",
|
"mdc2" => "default",
|
||||||
"montasm" => "default", # explicit option in 0.9.8 only (implicitly enabled in 0.9.9)
|
"montasm" => "default", # explicit option in 0.9.8 only (implicitly enabled in 0.9.9)
|
||||||
@@ -647,8 +646,7 @@ my %disabled = ( # "what" => "comment"
|
|||||||
# For symmetry, "disable-..." is a synonym for "no-...".
|
# For symmetry, "disable-..." is a synonym for "no-...".
|
||||||
|
|
||||||
# This is what $depflags will look like with the above default:
|
# This is what $depflags will look like with the above default:
|
||||||
my $default_depflags = "-DOPENSSL_NO_CAMELLIA -DOPENSSL_NO_CAPIENG -DOPENSSL_NO_CMS -DOPENSSL_NO_GMP -DOPENSSL_NO_MDC2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_RFC3779 -DOPENSSL_NO_SEED -DOPENSSL_NO_TLSEXT ";
|
my $default_depflags = " -DOPENSSL_NO_CAMELLIA -DOPENSSL_NO_CAPIENG -DOPENSSL_NO_CMS -DOPENSSL_NO_GMP -DOPENSSL_NO_JPAKE -DOPENSSL_NO_MDC2 -DOPENSSL_NO_RC5 -DOPENSSL_NO_RFC3779 -DOPENSSL_NO_SEED -DOPENSSL_NO_TLSEXT ";
|
||||||
|
|
||||||
|
|
||||||
my $no_sse2=0;
|
my $no_sse2=0;
|
||||||
|
|
||||||
@@ -977,8 +975,6 @@ foreach (sort (keys %disabled))
|
|||||||
{ $no_threads = 1; }
|
{ $no_threads = 1; }
|
||||||
elsif (/^shared$/)
|
elsif (/^shared$/)
|
||||||
{ $no_shared = 1; }
|
{ $no_shared = 1; }
|
||||||
elsif (/^experimental-jpake$/)
|
|
||||||
{ $jpake = 0; push @skip, "jpake"}
|
|
||||||
elsif (/^zlib$/)
|
elsif (/^zlib$/)
|
||||||
{ $zlib = 0; }
|
{ $zlib = 0; }
|
||||||
elsif (/^montasm$/)
|
elsif (/^montasm$/)
|
||||||
@@ -1216,11 +1212,6 @@ if ($threads)
|
|||||||
$openssl_thread_defines .= $thread_defines;
|
$openssl_thread_defines .= $thread_defines;
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($jpake)
|
|
||||||
{
|
|
||||||
$openssl_other_defines .= "#define OPENSSL_EXPERIMENTAL_JPAKE\n";
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($zlib)
|
if ($zlib)
|
||||||
{
|
{
|
||||||
$cflags = "-DZLIB $cflags";
|
$cflags = "-DZLIB $cflags";
|
||||||
|
|||||||
@@ -130,7 +130,7 @@
|
|||||||
#include <openssl/rsa.h>
|
#include <openssl/rsa.h>
|
||||||
#endif
|
#endif
|
||||||
#include <openssl/bn.h>
|
#include <openssl/bn.h>
|
||||||
#ifdef OPENSSL_EXPERIMENTAL_JPAKE
|
#ifndef OPENSSL_NO_JPAKE
|
||||||
#include <openssl/jpake.h>
|
#include <openssl/jpake.h>
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
@@ -2338,7 +2338,7 @@ void policies_print(BIO *out, X509_STORE_CTX *ctx)
|
|||||||
BIO_free(out);
|
BIO_free(out);
|
||||||
}
|
}
|
||||||
|
|
||||||
#ifdef OPENSSL_EXPERIMENTAL_JPAKE
|
#ifndef OPENSSL_NO_JPAKE
|
||||||
|
|
||||||
static JPAKE_CTX *jpake_init(const char *us, const char *them,
|
static JPAKE_CTX *jpake_init(const char *us, const char *them,
|
||||||
const char *secret)
|
const char *secret)
|
||||||
|
|||||||
@@ -338,7 +338,7 @@ X509_NAME *parse_name(char *str, long chtype, int multirdn);
|
|||||||
int args_verify(char ***pargs, int *pargc,
|
int args_verify(char ***pargs, int *pargc,
|
||||||
int *badarg, BIO *err, X509_VERIFY_PARAM **pm);
|
int *badarg, BIO *err, X509_VERIFY_PARAM **pm);
|
||||||
void policies_print(BIO *out, X509_STORE_CTX *ctx);
|
void policies_print(BIO *out, X509_STORE_CTX *ctx);
|
||||||
#ifdef OPENSSL_EXPERIMENTAL_JPAKE
|
#ifndef OPENSSL_NO_JPAKE
|
||||||
void jpake_client_auth(BIO *out, BIO *conn, const char *secret);
|
void jpake_client_auth(BIO *out, BIO *conn, const char *secret);
|
||||||
void jpake_server_auth(BIO *out, BIO *conn, const char *secret);
|
void jpake_server_auth(BIO *out, BIO *conn, const char *secret);
|
||||||
#endif
|
#endif
|
||||||
|
|||||||
@@ -338,7 +338,7 @@ int MAIN(int argc, char **argv)
|
|||||||
int peerlen = sizeof(peer);
|
int peerlen = sizeof(peer);
|
||||||
int enable_timeouts = 0 ;
|
int enable_timeouts = 0 ;
|
||||||
long mtu = 0;
|
long mtu = 0;
|
||||||
#ifdef OPENSSL_EXPERIMENTAL_JPAKE
|
#ifndef OPENSSL_NO_JPAKE
|
||||||
char *jpake_secret = NULL;
|
char *jpake_secret = NULL;
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
@@ -585,7 +585,7 @@ int MAIN(int argc, char **argv)
|
|||||||
/* meth=TLSv1_client_method(); */
|
/* meth=TLSv1_client_method(); */
|
||||||
}
|
}
|
||||||
#endif
|
#endif
|
||||||
#ifdef OPENSSL_EXPERIMENTAL_JPAKE
|
#ifndef OPENSSL_NO_JPAKE
|
||||||
else if (strcmp(*argv,"-jpake") == 0)
|
else if (strcmp(*argv,"-jpake") == 0)
|
||||||
{
|
{
|
||||||
if (--argc < 1) goto bad;
|
if (--argc < 1) goto bad;
|
||||||
@@ -897,7 +897,7 @@ SSL_set_tlsext_status_ids(con, ids);
|
|||||||
#endif
|
#endif
|
||||||
}
|
}
|
||||||
#endif
|
#endif
|
||||||
#ifdef OPENSSL_EXPERIMENTAL_JPAKE
|
#ifndef OPENSSL_NO_JPAKE
|
||||||
if (jpake_secret)
|
if (jpake_secret)
|
||||||
jpake_client_auth(bio_c_out, sbio, jpake_secret);
|
jpake_client_auth(bio_c_out, sbio, jpake_secret);
|
||||||
#endif
|
#endif
|
||||||
|
|||||||
@@ -742,7 +742,7 @@ BIO_printf(err, "cert_status: received %d ids\n", sk_OCSP_RESPID_num(ids));
|
|||||||
#endif
|
#endif
|
||||||
int MAIN(int, char **);
|
int MAIN(int, char **);
|
||||||
|
|
||||||
#ifdef OPENSSL_EXPERIMENTAL_JPAKE
|
#ifndef OPENSSL_NO_JPAKE
|
||||||
static char *jpake_secret = NULL;
|
static char *jpake_secret = NULL;
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
@@ -1076,7 +1076,7 @@ int MAIN(int argc, char *argv[])
|
|||||||
}
|
}
|
||||||
|
|
||||||
#endif
|
#endif
|
||||||
#ifdef OPENSSL_EXPERIMENTAL_JPAKE
|
#ifndef OPENSSL_NO_JPAKE
|
||||||
else if (strcmp(*argv,"-jpake") == 0)
|
else if (strcmp(*argv,"-jpake") == 0)
|
||||||
{
|
{
|
||||||
if (--argc < 1) goto bad;
|
if (--argc < 1) goto bad;
|
||||||
@@ -1684,7 +1684,7 @@ static int sv_body(char *hostname, int s, unsigned char *context)
|
|||||||
test=BIO_new(BIO_f_nbio_test());
|
test=BIO_new(BIO_f_nbio_test());
|
||||||
sbio=BIO_push(test,sbio);
|
sbio=BIO_push(test,sbio);
|
||||||
}
|
}
|
||||||
#ifdef OPENSSL_EXPERIMENTAL_JPAKE
|
#ifndef OPENSSL_NO_JPAKE
|
||||||
if(jpake_secret)
|
if(jpake_secret)
|
||||||
jpake_server_auth(bio_s_out, sbio, jpake_secret);
|
jpake_server_auth(bio_s_out, sbio, jpake_secret);
|
||||||
#endif
|
#endif
|
||||||
|
|||||||
@@ -101,7 +101,7 @@
|
|||||||
#ifndef OPENSSL_NO_CMS
|
#ifndef OPENSSL_NO_CMS
|
||||||
#include <openssl/cms.h>
|
#include <openssl/cms.h>
|
||||||
#endif
|
#endif
|
||||||
#ifdef OPENSSL_EXPERIMENTAL_JPAKE
|
#ifndef OPENSSL_NO_JPAKE
|
||||||
#include <openssl/jpake.h>
|
#include <openssl/jpake.h>
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
@@ -154,7 +154,7 @@ void ERR_load_crypto_strings(void)
|
|||||||
#ifndef OPENSSL_NO_CMS
|
#ifndef OPENSSL_NO_CMS
|
||||||
ERR_load_CMS_strings();
|
ERR_load_CMS_strings();
|
||||||
#endif
|
#endif
|
||||||
#ifdef OPENSSL_EXPERIMENTAL_JPAKE
|
#ifndef OPENSSL_NO_JPAKE
|
||||||
ERR_load_JPAKE_strings();
|
ERR_load_JPAKE_strings();
|
||||||
#endif
|
#endif
|
||||||
#endif
|
#endif
|
||||||
|
|||||||
@@ -10,8 +10,8 @@
|
|||||||
|
|
||||||
#include <openssl/opensslconf.h>
|
#include <openssl/opensslconf.h>
|
||||||
|
|
||||||
#ifndef OPENSSL_EXPERIMENTAL_JPAKE
|
#ifdef OPENSSL_NO_JPAKE
|
||||||
#error JPAKE is disabled
|
#error JPAKE is disabled.
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
#ifdef __cplusplus
|
#ifdef __cplusplus
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
#include <openssl/err.h>
|
#include <openssl/err.h>
|
||||||
|
|
||||||
#ifndef OPENSSL_EXPERIMENTAL_JPAKE
|
#ifdef OPENSSL_NO_JPAKE
|
||||||
int main(int argc, char *argv[])
|
int main(int argc, char *argv[])
|
||||||
{
|
{
|
||||||
printf("No J-PAKE support\n");
|
printf("No J-PAKE support\n");
|
||||||
|
|||||||
@@ -3702,23 +3702,23 @@ CRYPTO_dbg_remove_all_info 4090 EXIST::FUNCTION:
|
|||||||
OPENSSL_init 4091 EXIST::FUNCTION:
|
OPENSSL_init 4091 EXIST::FUNCTION:
|
||||||
private_Camellia_set_key 4092 EXIST:OPENSSL_FIPS:FUNCTION:CAMELLIA
|
private_Camellia_set_key 4092 EXIST:OPENSSL_FIPS:FUNCTION:CAMELLIA
|
||||||
CRYPTO_strdup 4093 EXIST::FUNCTION:
|
CRYPTO_strdup 4093 EXIST::FUNCTION:
|
||||||
JPAKE_STEP3A_process 4094 EXIST:OPENSSL_EXPERIMENTAL_JPAKE:FUNCTION:
|
JPAKE_STEP3A_process 4094 EXIST::FUNCTION:JPAKE
|
||||||
JPAKE_STEP1_release 4095 EXIST:OPENSSL_EXPERIMENTAL_JPAKE:FUNCTION:
|
JPAKE_STEP1_release 4095 EXIST::FUNCTION:JPAKE
|
||||||
JPAKE_get_shared_key 4096 EXIST:OPENSSL_EXPERIMENTAL_JPAKE:FUNCTION:
|
JPAKE_get_shared_key 4096 EXIST::FUNCTION:JPAKE
|
||||||
JPAKE_STEP3B_init 4097 EXIST:OPENSSL_EXPERIMENTAL_JPAKE:FUNCTION:
|
JPAKE_STEP3B_init 4097 EXIST::FUNCTION:JPAKE
|
||||||
JPAKE_STEP1_generate 4098 EXIST:OPENSSL_EXPERIMENTAL_JPAKE:FUNCTION:
|
JPAKE_STEP1_generate 4098 EXIST::FUNCTION:JPAKE
|
||||||
JPAKE_STEP1_init 4099 EXIST:OPENSSL_EXPERIMENTAL_JPAKE:FUNCTION:
|
JPAKE_STEP1_init 4099 EXIST::FUNCTION:JPAKE
|
||||||
JPAKE_STEP3B_process 4100 EXIST:OPENSSL_EXPERIMENTAL_JPAKE:FUNCTION:
|
JPAKE_STEP3B_process 4100 EXIST::FUNCTION:JPAKE
|
||||||
JPAKE_STEP2_generate 4101 EXIST:OPENSSL_EXPERIMENTAL_JPAKE:FUNCTION:
|
JPAKE_STEP2_generate 4101 EXIST::FUNCTION:JPAKE
|
||||||
JPAKE_CTX_new 4102 EXIST:OPENSSL_EXPERIMENTAL_JPAKE:FUNCTION:
|
JPAKE_CTX_new 4102 EXIST::FUNCTION:JPAKE
|
||||||
JPAKE_CTX_free 4103 EXIST:OPENSSL_EXPERIMENTAL_JPAKE:FUNCTION:
|
JPAKE_CTX_free 4103 EXIST::FUNCTION:JPAKE
|
||||||
JPAKE_STEP3B_release 4104 EXIST:OPENSSL_EXPERIMENTAL_JPAKE:FUNCTION:
|
JPAKE_STEP3B_release 4104 EXIST::FUNCTION:JPAKE
|
||||||
JPAKE_STEP3A_release 4105 EXIST:OPENSSL_EXPERIMENTAL_JPAKE:FUNCTION:
|
JPAKE_STEP3A_release 4105 EXIST::FUNCTION:JPAKE
|
||||||
JPAKE_STEP2_process 4106 EXIST:OPENSSL_EXPERIMENTAL_JPAKE:FUNCTION:
|
JPAKE_STEP2_process 4106 EXIST::FUNCTION:JPAKE
|
||||||
JPAKE_STEP3B_generate 4107 EXIST:OPENSSL_EXPERIMENTAL_JPAKE:FUNCTION:
|
JPAKE_STEP3B_generate 4107 EXIST::FUNCTION:JPAKE
|
||||||
JPAKE_STEP1_process 4108 EXIST:OPENSSL_EXPERIMENTAL_JPAKE:FUNCTION:
|
JPAKE_STEP1_process 4108 EXIST::FUNCTION:JPAKE
|
||||||
JPAKE_STEP3A_generate 4109 EXIST:OPENSSL_EXPERIMENTAL_JPAKE:FUNCTION:
|
JPAKE_STEP3A_generate 4109 EXIST::FUNCTION:JPAKE
|
||||||
JPAKE_STEP2_release 4110 EXIST:OPENSSL_EXPERIMENTAL_JPAKE:FUNCTION:
|
JPAKE_STEP2_release 4110 EXIST::FUNCTION:JPAKE
|
||||||
JPAKE_STEP3A_init 4111 EXIST:OPENSSL_EXPERIMENTAL_JPAKE:FUNCTION:
|
JPAKE_STEP3A_init 4111 EXIST::FUNCTION:JPAKE
|
||||||
ERR_load_JPAKE_strings 4112 EXIST:OPENSSL_EXPERIMENTAL_JPAKE:FUNCTION:
|
ERR_load_JPAKE_strings 4112 EXIST::FUNCTION:JPAKE
|
||||||
JPAKE_STEP2_init 4113 EXIST:OPENSSL_EXPERIMENTAL_JPAKE:FUNCTION:
|
JPAKE_STEP2_init 4113 EXIST::FUNCTION:JPAKE
|
||||||
|
|||||||
@@ -233,6 +233,7 @@ $cflags.=" -DOPENSSL_NO_SSL2" if $no_ssl2;
|
|||||||
$cflags.=" -DOPENSSL_NO_SSL3" if $no_ssl3;
|
$cflags.=" -DOPENSSL_NO_SSL3" if $no_ssl3;
|
||||||
$cflags.=" -DOPENSSL_NO_TLSEXT" if $no_tlsext;
|
$cflags.=" -DOPENSSL_NO_TLSEXT" if $no_tlsext;
|
||||||
$cflags.=" -DOPENSSL_NO_CMS" if $no_cms;
|
$cflags.=" -DOPENSSL_NO_CMS" if $no_cms;
|
||||||
|
$cflags.=" -DOPENSSL_NO_JPAKE" if $no_jpake;
|
||||||
$cflags.=" -DOPENSSL_NO_CAPIENG" if $no_capieng;
|
$cflags.=" -DOPENSSL_NO_CAPIENG" if $no_capieng;
|
||||||
$cflags.=" -DOPENSSL_NO_ERR" if $no_err;
|
$cflags.=" -DOPENSSL_NO_ERR" if $no_err;
|
||||||
$cflags.=" -DOPENSSL_NO_KRB5" if $no_krb5;
|
$cflags.=" -DOPENSSL_NO_KRB5" if $no_krb5;
|
||||||
@@ -242,7 +243,6 @@ $cflags.=" -DOPENSSL_NO_ECDH" if $no_ecdh;
|
|||||||
$cflags.=" -DOPENSSL_NO_ENGINE" if $no_engine;
|
$cflags.=" -DOPENSSL_NO_ENGINE" if $no_engine;
|
||||||
$cflags.=" -DOPENSSL_NO_HW" if $no_hw;
|
$cflags.=" -DOPENSSL_NO_HW" if $no_hw;
|
||||||
$cflags.=" -DOPENSSL_FIPS" if $fips;
|
$cflags.=" -DOPENSSL_FIPS" if $fips;
|
||||||
$cflags.=" -DOPENSSL_EXPERIMENTAL_JPAKE" if $jpake;
|
|
||||||
$cflags.= " -DZLIB" if $zlib_opt;
|
$cflags.= " -DZLIB" if $zlib_opt;
|
||||||
$cflags.= " -DZLIB_SHARED" if $zlib_opt == 2;
|
$cflags.= " -DZLIB_SHARED" if $zlib_opt == 2;
|
||||||
|
|
||||||
@@ -1021,8 +1021,8 @@ sub var_add
|
|||||||
return("") if $no_dh && $dir =~ /\/dh/;
|
return("") if $no_dh && $dir =~ /\/dh/;
|
||||||
return("") if $no_ec && $dir =~ /\/ec/;
|
return("") if $no_ec && $dir =~ /\/ec/;
|
||||||
return("") if $no_cms && $dir =~ /\/cms/;
|
return("") if $no_cms && $dir =~ /\/cms/;
|
||||||
|
return("") if $no_jpake && $dir =~ /\/jpake/;
|
||||||
return("") if !$fips && $dir =~ /^fips/;
|
return("") if !$fips && $dir =~ /^fips/;
|
||||||
return("") if !$jpake && $dir =~ /\/jpake/;
|
|
||||||
if ($no_des && $dir =~ /\/des/)
|
if ($no_des && $dir =~ /\/des/)
|
||||||
{
|
{
|
||||||
if ($val =~ /read_pwd/)
|
if ($val =~ /read_pwd/)
|
||||||
@@ -1290,6 +1290,7 @@ sub read_options
|
|||||||
"no-ssl3" => \$no_ssl3,
|
"no-ssl3" => \$no_ssl3,
|
||||||
"no-tlsext" => \$no_tlsext,
|
"no-tlsext" => \$no_tlsext,
|
||||||
"no-cms" => \$no_cms,
|
"no-cms" => \$no_cms,
|
||||||
|
"no-jpake" => \$no_jpake,
|
||||||
"no-capieng" => \$no_capieng,
|
"no-capieng" => \$no_capieng,
|
||||||
"no-err" => \$no_err,
|
"no-err" => \$no_err,
|
||||||
"no-sock" => \$no_sock,
|
"no-sock" => \$no_sock,
|
||||||
@@ -1320,8 +1321,6 @@ sub read_options
|
|||||||
"fips" => \$fips,
|
"fips" => \$fips,
|
||||||
"fipscanisterbuild" => [\$fips, \$fipscanisterbuild],
|
"fipscanisterbuild" => [\$fips, \$fipscanisterbuild],
|
||||||
"fipsdso" => [\$fips, \$fipscanisterbuild, \$fipsdso],
|
"fipsdso" => [\$fips, \$fipscanisterbuild, \$fipsdso],
|
||||||
"no-experimental-jpake" => 0,
|
|
||||||
"enable-experimental-jpake" => \$jpake,
|
|
||||||
);
|
);
|
||||||
|
|
||||||
if (exists $valid_options{$_})
|
if (exists $valid_options{$_})
|
||||||
|
|||||||
@@ -79,8 +79,7 @@ my $OS2=0;
|
|||||||
my $safe_stack_def = 0;
|
my $safe_stack_def = 0;
|
||||||
|
|
||||||
my @known_platforms = ( "__FreeBSD__", "PERL5", "NeXT",
|
my @known_platforms = ( "__FreeBSD__", "PERL5", "NeXT",
|
||||||
"EXPORT_VAR_AS_FUNCTION", "ZLIB", "OPENSSL_FIPS",
|
"EXPORT_VAR_AS_FUNCTION", "ZLIB", "OPENSSL_FIPS");
|
||||||
"OPENSSL_EXPERIMENTAL_JPAKE" );
|
|
||||||
my @known_ossl_platforms = ( "VMS", "WIN16", "WIN32", "WINNT", "OS2" );
|
my @known_ossl_platforms = ( "VMS", "WIN16", "WIN32", "WINNT", "OS2" );
|
||||||
my @known_algorithms = ( "RC2", "RC4", "RC5", "IDEA", "DES", "BF",
|
my @known_algorithms = ( "RC2", "RC4", "RC5", "IDEA", "DES", "BF",
|
||||||
"CAST", "MD2", "MD4", "MD5", "SHA", "SHA0", "SHA1",
|
"CAST", "MD2", "MD4", "MD5", "SHA", "SHA0", "SHA1",
|
||||||
@@ -103,6 +102,8 @@ my @known_algorithms = ( "RC2", "RC4", "RC5", "IDEA", "DES", "BF",
|
|||||||
"CMS",
|
"CMS",
|
||||||
# CryptoAPI Engine
|
# CryptoAPI Engine
|
||||||
"CAPIENG",
|
"CAPIENG",
|
||||||
|
# JPAKE
|
||||||
|
"JPAKE",
|
||||||
# Deprecated functions
|
# Deprecated functions
|
||||||
"DEPRECATED" );
|
"DEPRECATED" );
|
||||||
|
|
||||||
@@ -123,7 +124,7 @@ my $no_rsa; my $no_dsa; my $no_dh; my $no_hmac=0; my $no_aes; my $no_krb5;
|
|||||||
my $no_ec; my $no_ecdsa; my $no_ecdh; my $no_engine; my $no_hw; my $no_camellia;
|
my $no_ec; my $no_ecdsa; my $no_ecdh; my $no_engine; my $no_hw; my $no_camellia;
|
||||||
my $no_seed;
|
my $no_seed;
|
||||||
my $no_fp_api; my $no_static_engine; my $no_gmp; my $no_deprecated;
|
my $no_fp_api; my $no_static_engine; my $no_gmp; my $no_deprecated;
|
||||||
my $no_rfc3779; my $no_tlsext; my $no_cms; my $no_capieng;
|
my $no_rfc3779; my $no_tlsext; my $no_cms; my $no_capieng; my $no_jpake;
|
||||||
my $fips;
|
my $fips;
|
||||||
|
|
||||||
|
|
||||||
@@ -153,10 +154,6 @@ foreach (@ARGV, split(/ /, $options))
|
|||||||
$zlib = 1;
|
$zlib = 1;
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($_ eq "enable-experimental-jpake") {
|
|
||||||
$jpake = 1;
|
|
||||||
}
|
|
||||||
|
|
||||||
$do_ssl=1 if $_ eq "ssleay";
|
$do_ssl=1 if $_ eq "ssleay";
|
||||||
if ($_ eq "ssl") {
|
if ($_ eq "ssl") {
|
||||||
$do_ssl=1;
|
$do_ssl=1;
|
||||||
@@ -216,6 +213,7 @@ foreach (@ARGV, split(/ /, $options))
|
|||||||
elsif (/^no-tlsext$/) { $no_tlsext=1; }
|
elsif (/^no-tlsext$/) { $no_tlsext=1; }
|
||||||
elsif (/^no-cms$/) { $no_cms=1; }
|
elsif (/^no-cms$/) { $no_cms=1; }
|
||||||
elsif (/^no-capieng$/) { $no_capieng=1; }
|
elsif (/^no-capieng$/) { $no_capieng=1; }
|
||||||
|
elsif (/^no-jpake$/) { $no_jpake=1; }
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
@@ -556,10 +554,6 @@ sub do_defs
|
|||||||
$tag{$tag[$tag_i]}=2;
|
$tag{$tag[$tag_i]}=2;
|
||||||
print STDERR "DEBUG: $file: chaged tag $1 = 2\n" if $debug;
|
print STDERR "DEBUG: $file: chaged tag $1 = 2\n" if $debug;
|
||||||
}
|
}
|
||||||
if ($tag[$tag_i] eq "OPENSSL_EXPERIMENTAL_".$1) {
|
|
||||||
$tag{$tag[$tag_i]}=-2;
|
|
||||||
print STDERR "DEBUG: $file: chaged tag $1 = -2\n" if $debug;
|
|
||||||
}
|
|
||||||
$tag_i--;
|
$tag_i--;
|
||||||
}
|
}
|
||||||
} elsif (/^\#\s*endif/) {
|
} elsif (/^\#\s*endif/) {
|
||||||
@@ -569,8 +563,6 @@ sub do_defs
|
|||||||
print STDERR "DEBUG: \$t=\"$t\"\n" if $debug;
|
print STDERR "DEBUG: \$t=\"$t\"\n" if $debug;
|
||||||
if ($tag{$t}==2) {
|
if ($tag{$t}==2) {
|
||||||
$tag{$t}=-1;
|
$tag{$t}=-1;
|
||||||
} elsif ($tag{$t}==-2) {
|
|
||||||
$tag{$t}=1;
|
|
||||||
} else {
|
} else {
|
||||||
$tag{$t}=0;
|
$tag{$t}=0;
|
||||||
}
|
}
|
||||||
@@ -1109,9 +1101,6 @@ sub is_valid
|
|||||||
return 1;
|
return 1;
|
||||||
}
|
}
|
||||||
if ($keyword eq "ZLIB" && $zlib) { return 1; }
|
if ($keyword eq "ZLIB" && $zlib) { return 1; }
|
||||||
if ($keyword eq "OPENSSL_EXPERIMENTAL_JPAKE" && $jpake) {
|
|
||||||
return 1;
|
|
||||||
}
|
|
||||||
return 0;
|
return 0;
|
||||||
} else {
|
} else {
|
||||||
# algorithms
|
# algorithms
|
||||||
@@ -1156,6 +1145,7 @@ sub is_valid
|
|||||||
if ($keyword eq "TLSEXT" && $no_tlsext) { return 0; }
|
if ($keyword eq "TLSEXT" && $no_tlsext) { return 0; }
|
||||||
if ($keyword eq "CMS" && $no_cms) { return 0; }
|
if ($keyword eq "CMS" && $no_cms) { return 0; }
|
||||||
if ($keyword eq "CAPIENG" && $no_capieng) { return 0; }
|
if ($keyword eq "CAPIENG" && $no_capieng) { return 0; }
|
||||||
|
if ($keyword eq "JPAKE" && $no_jpake) { return 0; }
|
||||||
if ($keyword eq "DEPRECATED" && $no_deprecated) { return 0; }
|
if ($keyword eq "DEPRECATED" && $no_deprecated) { return 0; }
|
||||||
|
|
||||||
# Nothing recognise as true
|
# Nothing recognise as true
|
||||||
|
|||||||
Reference in New Issue
Block a user